Wei Dai: b-money, Crypto++, and Reference 1 of the Bitcoin White Paper

Wei Dai is a computer engineer and cryptographer who published b-money in November 1998, a proposal for an anonymous distributed electronic cash system in which participants create money by solving computational problems of known cost. It is the first reference in the Bitcoin white paper, and the smallest denomination of ether, the wei, is named after him.

1. Who Is Wei Dai? The Most Private Person in Cryptocurrency History

• Background & Experience: Dai graduated in computer science from the University of Washington shortly before publishing b-money in 1998, and later worked in the Cryptography Research Group at Microsoft. He was active on the cypherpunks, Extropians, and SL4 mailing lists in the 1990s, where he exchanged ideas with figures including Tim May, Nick Szabo, Hal Finney, and later the early rationalist community around Eliezer Yudkowsky and Robin Hanson. He has been described as intensely private and has given almost no interviews, published no book, and never founded a company on the back of his contribution. Most of what is known about him comes from his own archived writing and from correspondence that others published.

2. Major Contributions: b-money and Crypto++

• Major Contributions:
  • b-money (November 1998): Posted to the cypherpunks mailing list, the proposal opens by describing "a scheme for a group of untraceable digital pseudonyms to pay each other with money and to enforce contracts amongst themselves without outside help." It specifies two protocols. In the first, every participant maintains a copy of every account balance, and money is created by broadcasting the solution to a previously unsolved computational problem whose cost in computing effort is publicly known. In the second, a subset of participants act as servers holding the accounts, with security enforced by deposits and audits. An appendix proposes an auction mechanism for money creation, addressing the problem that the cost of computation falls over time.
  • Contract enforcement without courts: b-money did not stop at payments. It specified how parties to an agreement could each deposit funds into a special account and submit to an arbitrator chosen in advance, with the deposits released or forfeited according to the outcome. The mechanism is a description of escrow and dispute resolution among pseudonyms, and it anticipates the problem that smart contract platforms took another twenty years to confront: code can move money automatically, but someone still has to decide what happened in the physical world.
  • The parts Bitcoin kept and dropped: Bitcoin adopted computational cost as the issuance mechanism, broadcast-based settlement, and pseudonymous public keys as accounts. It rejected b-money's assumption of a synchronous, unjammable broadcast channel, replaced the account model with unspent transaction outputs, and solved the problem b-money left open, which was how participants agree on a single history when they disagree.
  • Crypto++ (1995-2015): Dai wrote and maintained one of the most widely used open-source C++ cryptographic libraries. Bitcoin version 0.1 shipped with Crypto++ code for its SHA-256 implementation, making Dai's software a direct dependency of Bitcoin from the first release. He stepped away from the project in June 2015 and the community continues to maintain it.
  • VMAC: Co-proposed with Ted Krovetz, a fast message authentication algorithm designed for high-performance software.

3. Dai's Place in Blockchain History

• Impact Assessment: b-money is cited first in the Bitcoin white paper, ahead of Hashcash and the timestamping papers, which has given it a place in the canon out of proportion to its length. The proposal is a few thousand words and was never implemented, but it stated the goal precisely a decade early: money that a group of pseudonymous participants can create, hold, and enforce contracts with, without any outside authority. Ethereum's decision to name its base unit "wei" made that acknowledgment permanent in a second ecosystem. Dai's influence is also indirect and considerable through Crypto++, which put audited cryptographic primitives in reach of ordinary developers for two decades.
• Key Perspectives: The opening of b-money places it explicitly in the cypherpunk tradition, referring to a community where "violence is impossible because its participants cannot be linked to their true names or physical locations." Dai's later public comments have been measured rather than promotional: his account is that Satoshi arrived at similar ideas independently and credited b-money after being pointed to it, which matches the documented email record.

4. Common Misconceptions About Wei Dai

• Controversies & Criticisms:
  • "Wei Dai is Satoshi Nakamoto": Raised regularly because of the citation, the email contact, and the Crypto++ dependency. The email record works against it: on August 22, 2008 Satoshi wrote to Dai asking for the publication year of b-money in order to cite it, an exchange that would be pointless if they were the same person. Dai has not claimed the identity.
  • "Bitcoin is an implementation of b-money": Satoshi himself wrote a version of this claim in the February 2009 P2P Foundation announcement, describing Bitcoin as an implementation of Wei Dai's b-money proposal and Nick Szabo's Bit Gold. The private emails complicate it: Satoshi told Adam Back that he had not seen b-money before Back pointed him to it, meaning the design was already substantially complete.
  • "b-money solved consensus": It did not. The first b-money protocol assumes that all participants receive all broadcasts, which is exactly the assumption that fails on the open internet and that proof-of-work chains exist to work around.
  • "b-money was ignored until Satoshi found it": It was discussed at the time. Adam Back posted a detailed critique in December 1998 listing seven problems with its monetary design, and other cypherpunks including Tim May responded to the proposal. The discussion is part of why Back remembered it a decade later and pointed Satoshi to it.
  • "He got rich from Bitcoin": There is no public evidence of significant holdings, and Dai has never made claims about his own position.
  • "b-money and Bit Gold were the same proposal": They were written within months of each other and share the insight that computation can substitute for an issuer, but they differ in structure. Bit Gold chains the puzzle solutions themselves and registers ownership in a title database; b-money leaves the ledger with the participants and focuses on the monetary rules, including an auction to set how much money each period should create.

5. Timeline and Current Status

• 1995: First release of Crypto++.

• November 1998: Publishes b-money on the cypherpunks mailing list.

• December 1998: Adam Back posts a detailed critique of b-money's monetary design.

• August 22, 2008: Receives an email from Satoshi Nakamoto requesting a citation date for b-money.

• October 31, 2008: b-money appears as reference 1 in the Bitcoin white paper.

• January 2009: Bitcoin v0.1 ships with Crypto++ code.

• June 2015: Steps away from maintaining Crypto++.

• 2015: Ethereum names its smallest unit the wei.

• Current Status & Future: Dai has remained deliberately out of public life, contributing occasionally to online discussions on cryptography, philosophy, and artificial intelligence safety rather than to cryptocurrency projects. His b-money page is still online at its original address, unchanged, which is itself a small piece of internet history: the document Satoshi asked to cite is still where it was in 1998.